fix: snyk-docker-vulnerability-scan sarif

See https://github.com/github/codeql-action/issues/2187#issuecomment-2043220400
This commit is contained in:
Steven 2025-10-07 18:53:39 +02:00 committed by GitHub
parent c23b68a9ef
commit 7e729bf4dd
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -32,6 +32,8 @@ jobs:
args: --file=Dockerfile
- name: Output sarif file
run: cat snyk.sarif
- name: fix security-severity "null" to "0" for valid sarif format
run: sed -i 's/"security-severity": "null"/"security-severity": "0"/g' snyk.sarif
- name: Upload result to GitHub Code Scanning
uses: github/codeql-action/upload-sarif@v4
with: